Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: mNwFc6Tjv48XNV6sPo2nFG3OY7ObiQEmoxDpR2Dekdk=
Subject key identifier: 2A:60:FA:40:58:5C:06:92:BE:65:75:3C:0F:0F:4D:5E:69:B2:6C:F7
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0197684DD4042F5BA572758679A26DB930E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 08:00:20 +0000
Manifest this update: Fri 13 Jun 2025 08:00:20 +0000
Manifest next update: Sat 14 Jun 2025 08:00:20 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: gIR3nMLtnN6C3oBCNghk0V0mdlWOGfOmgJfolrLtbJc=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:d4:04:2f:5b:a5:72:75:86:79:a2:6d:b9:30:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jun 13 08:00:20 2025 GMT
Not After : Jun 14 08:00:20 2025 GMT
Subject: CN=2a60fa40585c0692be65753c0f0f4d5e69b26cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:77:55:1a:bb:80:a5:2e:7c:92:57:21:39:
5e:b6:d3:1a:18:8a:7f:e4:ee:08:a5:4a:38:cc:3c:
8a:f1:62:29:9a:74:11:a3:3d:70:5a:39:9a:07:01:
c3:f7:56:42:44:09:45:05:cb:d5:10:a0:a1:38:19:
9a:93:13:60:bc:8a:d3:c7:db:d7:78:79:97:45:8a:
7c:40:4f:aa:2c:74:06:50:f9:21:f0:16:db:37:70:
4a:8f:5a:f8:5e:2f:00:79:25:a6:12:69:4b:79:5d:
45:5a:bb:a6:f0:25:00:7d:b5:bd:b9:58:79:92:0d:
7e:42:62:75:21:4d:6a:a2:39:4e:2f:09:42:70:26:
50:6e:d4:a4:a7:0c:ae:8b:2c:87:76:1c:ca:74:17:
f3:b9:76:ca:92:87:5b:0d:a7:54:2b:6e:af:fe:6a:
9c:d9:55:b7:36:3a:14:1c:37:7b:79:f7:23:9e:3c:
cb:13:82:63:fc:1e:f3:68:6b:e1:3c:bd:e5:97:8a:
73:a4:5f:c1:43:1b:4f:56:c4:c4:26:75:a5:41:23:
af:31:05:7a:ce:a6:58:7a:b3:71:55:a8:5d:e2:41:
a7:fd:18:8e:7d:82:00:d6:a6:e7:a3:e9:ef:d4:5e:
75:be:f3:dd:c1:be:85:7c:b8:ab:2c:ca:21:d6:29:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:FA:40:58:5C:06:92:BE:65:75:3C:0F:0F:4D:5E:69:B2:6C:F7
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:87:4f:36:8f:cf:fe:17:79:e1:3a:f0:48:21:80:86:d0:05:
97:ca:27:5c:64:18:53:d4:b8:35:46:e5:6c:28:95:d9:86:68:
8a:d0:c8:72:c0:0a:07:82:0d:fc:76:f4:e0:46:f2:8d:db:dd:
25:46:45:59:84:48:22:15:64:4b:68:2a:8d:41:57:69:da:78:
f1:6c:f2:b6:54:db:f0:ef:32:58:ed:54:2d:2b:73:ee:12:8c:
47:62:8c:54:6c:db:f5:63:fa:6a:01:83:4f:04:1f:ab:24:ab:
c6:f9:a9:d5:85:8e:09:9b:32:66:29:04:d3:d2:43:72:8e:a4:
26:70:cd:98:1b:aa:ed:91:34:5c:c2:a9:14:01:57:d7:74:00:
47:32:83:1e:26:91:f3:34:cc:3d:69:d3:77:ac:cb:aa:da:c6:
22:14:aa:2f:dc:c0:62:01:af:1c:65:6e:3a:17:96:02:3e:7e:
33:fd:83:e8:3e:b4:23:33:cf:03:2e:2e:9a:26:db:0f:f7:36:
f3:9b:72:d4:00:0b:73:ea:54:32:e6:f1:a9:17:43:59:a6:f6:
1f:1a:42:af:17:55:33:45:33:e2:53:89:26:6e:0c:48:54:04:
25:25:98:62:62:a1:6b:15:ab:e6:bc:95:2b:9a:ef:81:38:f3:
e3:27:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:54 2025 by rpki-client